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DETAILED ACTION 
Response to Arguments 

Applicant's arguments with respect to claims 1-31 have been considered but are 
moot in view of the new ground(s) of rejection. 

1 . The examiner notes that the applicant has removed considerable detail from 
the claims, thus broadening them. Secondly, their main argument focuses on the fact 
that they claim their mobile requests the node address as compared to Tsuda who 
automatically sends this information to the mobile. 

The examiner notes that this is a design choice since one skilled understands 
that novelty is not found in simply automating a process ( In essence, the applicant is 
claiming/arguing a process that has un-automated Tsuda's teachings) . Comparing the 
two, the applicant's design is very cumbersome and requires the user to have some 
forethought or knowledge as to whom to address a request message to, whereas Tsuda 
continually updates the user with this information. 

McCann teaches a system whereby a user must request access to a network 
and provide valid credentials (eg. pass codes and/or payment). Taken a step further, 
one skilled would also interpret that the user would either request address information 
about this new network and/or the information would be downloaded to the mobile 
device. Hence, one skilled would anticipate that "network-related" data such as 
important phone numbers, addresses, contacts, etc.. would be provided (either by a 
manual request and/or automatically). 

Hence, combining McCann and Tsuda would arrive at a solution whereby the 
user would have to manually request any/all network-related data from the new network 
(as opposed to Tsuda's design whereby the user appears to be empirically trusted to 
roam freely and connect freely). 

As a second point, the examiner notes that Tsuda appears to have contemplated 
a manual process whereby the user must request the network node addresses since he 
has automated this process. 
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As a last point, Lee teaches nomadic computing whereby the network provides 
translation of messages from a user device (as they roam) to determine the new 
addresses of network devices to alleviate the user from having to know these new 
addresses/devices. Hence, Lee provides an automatic/transparent process to change a 
user's request for contacting an "old" device address into a request with a "new" 
device's address as the user roams. This alleviates the user from "consciously" having 
to send a specific request to the network for this new address. 

> Lee has been applied to the rejection (McCann has not). 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-2, 4, 6-8, 10-21 and 27-31 rejected under 35 U.S.C. 103(a) as being 

unpatentable over Tsuda and further in view of Kim and Lee et al US 6.751459 . 

As per claims 1, 4, 6, 14, 21, 27-28 and 30, Tsuda teaches a method for 
transmitting, to subscriber's user equipment, information required (eg. for a certificate 
issuance service in another network than a home network. See figure 10 shows mobile 
user registering with a foreign agent in a non-home network) in mobile communication 
system (title, abstract and figure 1 show a system that allows a user to be authenticated 
to roam to various networks and use services whereby AAA information is transmitted 
to/from a user's device), the method comprising: 

authenticating the subscriber (see figure 6, Step 2 and figure 10 which shows an 
authentication procedure); and transmitting to the user equipment at least part of the 
information required for obtaining the certificate in the other network (see figure 10) 
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during the subscriber authentication (figure 10 shows overall procedure whereby data is 
sent to/from the mobile's AAA-H/AAA-V servers in order to authenticate said user as he 
roams. Figures 10-1 1 show mobile authenticating with AAA and P#186 discusses use 
of certificate issuance via certificate authority). 

Tsuda also teaches a Mobile IP network (figure 1 shows a mobile user who has 
roamed from a home network #1001/#1010 to a visited network #1002/#1010 
connected via IP which inherently subnets a network into smaller networks and their 
location is known based on where the engineer has positioned the local access 
router/BTS). Further the mobile network maintains user location in an HLR and Tsuda 
teaches both home and foreign networks (P#67 and P#71) which inherently describes 
the concept of knowing where the user is (eg. maintaining a subscriber's location in the 
network) since it is either in the (one) home network or in any of other foreign networks 
(see figure 18 which shows multiple foreign subnets, #1002/#1004); 

But is silent on where the subscriber currently is located in a mobile 
communication system AND the method comprising: maintaining in the mobile 
communication system subscriber's location information and determining based of the 
subscriber's location and receiving a message from subscriber's user equipment, 
indicating that an address of a network node for certificate issuance and delivery 
procedure in a visited network is reouested by the subscriber's user eguipment . 

Kim teaches "...FIG. 5 illustrates a base station system parameter database mounted on 
the home-zone service center 1 70. As shown in the drawing, the base station system parameter 
' database stores every base station's inherent IDiBts id), location information of each base 
station like latitude and longitude, information about each sector like angle, system delay, and 
service range (angle, s_delay, svc_ran), exception range (exp_ran), change filed (change) and so 
forth. Before explaining about the exception range, it should be understood that the base stations 
located within the designated distance from the subscriber's residence regard (or decide) all 
sectors as a service sector. Here, the exception range is a value necessary for establishing the 
designated distance through which the base stations made the decision aforementioned...", 
(P#40) which shows that the location of each BTS is known (eg based on LAT/LONG) 
and would provide Tsuda with the location of the foreign agent/access router's location 
and hence, the location of the mobile unit it is communicating with. 

Furthermore. Lee teaches an "automated process" to enable nomadic roaming 
such that a user can reguest connectivity to a device whereby an agent determines the 
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user has roamed into a visited network and translates the request into a connection to a 
new, similar device (Abstract). This alleviates the need for the user to track/determine if 
they have roamed into a visited network and then request a new device address. 

With further regard to claims 1 and 4, Tsuda teaches a mobile user roaming 
(see figure 10) and requiring a connection between foreign and home AAA servers, 
which inherently will pass the address of the foreign node serving the mobile unit. 

With further regard to claim 14, Tsuda teaches authentication via AAA servers 
(figure 10) for the purpose of roaming to other foreign networks and using services 
there, see figure 4 and P#69). 

With further regard to claim 27, Tsuda teaches using an authenticated channel 
via encryption (P#135). 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that where the subscriber currently is located in a mobile 
communication system AND the method comprising: maintaining in the mobile 
communication system subscriber's location information and determining based of the 
subscriber's location, to provide means for utilizing the user's location to assist with the 
authentication process to quickly identify which area the user has roamed to and what 
services may be available there. 

As per claim 2, Tsuda teaches claim 1 , further comprising: receiving in the 
message from the subscribers user equipment, further the address of the network node : 
checking whether or not the address which the message indicated corresponds to the 
address determined on the basis of the location information; and if they do not 
correspond to each other, using the address determined on the basis of the location 
information (figure 1 shows a user roaming from network #1001 to network #1002, 
Mobile IP would inherently change the subnet address of the mobile unit to that of the 
Foreign Agent since the user has roamed to a new access point). 
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As per claim 7, Tsuda teaches claim 6, further comprising, performing the 
authentication is an application level authentication (figure 10 shows the process by 
which the user's authentication "program" communicates with other AAA server 
programs for authentication. Also se figure 1 1 and figures 12a-d which show packet 
layout. Hence the examiner interprets Tsuda's design as the AAA process being an 
application level authentication since it "rides on top of the Mobile IP layer). 

As per claim 8, Tsuda teaches claim 6, wherein further comprising utilizing said 
part of the information during a certificate issuance procedure after the authentication in 
a visited network by the user eguipment (figures 10-1 1 show mobile authenticating with 
AAA and P#1 86 discusses use of certificate issuance via certificate authority., The 
examiner notes it is well known in the art to first authenticate someone before allowing 
moving forward with a process/procedure, eg. issuing a certificate) . 

As per claims 10 and 16, Tsuda teaches claim 6/15, wherein transmitting in said 
part of the information at least an address of a network node via which the service is 
provided (figure 1 shows the user roaming from home Mobile IP subnet to another 
Mobile IP subnet whereby the network node address of the home agent #101 1 and 
foreign agents #1021 would be ascertained as the unit roams). 

As per claims 11 and 18, Tsuda teaches claim 6/14, wherein transmitting in said 
part of the information at least a public key required for the service (P#186). 

As per claim 12, Tsuda teaches claim 6, wherein transmitting in said part of the 
information at least an indication of the protocol required for the service (Tsuda teaches 
using the Mobile IP protocol. Figures 12a-d show the packet layout). 
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As per claim 13, Tsuda teaches claim 6, further comprising transmitting in said 
part of the information at least an address of a network node via which the certificate 
issuance service is provided to the user eguipment transmitting from the user 
equipment a certificate request to the network node (figure 10 shows the overall 
authentication from the mobile user #1010 to visited and home AAA servers via the 
Foreign Agent. Certificate issuance is supported by Tsuda, see P#186). 

As per claim 15, Tsuda teaches claim 14, wherein transmitting t he message and 
the reply message in an integrity protected channel (P#135). 

As per claim 17, Tsuda teaches claim 16, further comprising transmitting from 
the user equipment a certificate request to the network node (P#186). 

As per claim 19, Tsuda teaches claim 15, wherein transmitting in said part of the 
information at least an indication of the protocol required for the certificate issuance 
service (Tsuda teaches Mobile IP and packet layouts, see figures 12a-d. IP Headers 
inherently use a field to indicate the type of protocol and service). 

As per claim 20, Tsuda teaches claim 1 1 , wherein further comprising configuring 
the message to relate to a certificate issuance service (P#186). 

As per claim 29, Tsuda teaches claim 28, wherein the other network node is in a 
visited network (figure 1 shows a home network #1001 and visited/foreign network 
#1002). 

As per claim 31, Tsuda teaches claim 30, wherein the user equipment (UE) is 
arranged to receive said part of the information from a network node with which the user 
equipment was authenticated, the network node being in a home network (figure 10 
shows authentication as user roams whereby the process includes links from mobile to 
foreign agent, to AAA-F, to AAA-H concluding at the Home Agent, whereby the AAA-H 
and home agent can be interpreted as network nodes in the home network). 
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Claims 3, 5, 9, 23 and 25 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Tsuda/Kim /Lee and further in view of Sandhu et al. US 
2002/0145561. 

As per claim 3, Tsuda teaches claim 1, further comprising: receiving further in 
the message subscriber's location: 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and using the maintained location 
information if it does not correspond to the location information in the message (figure 1 
shows a user in either a Home Network #1001 whereby the user communicates with the 
home agent #101 1 and/or the user roaming to a Visited/Foreign network #1002 and 
communicates with the Foreign agent #1021 . Either means would inherently include 
the network understanding where the user is located based on the IP Address of the IP 
Subnet for the Access Point) but is silent on location information. 

Kim teaches determining location of the mobile user based on the BTS's 
LAT/LONG being known and hence a mobile communicating with a specific BTS will 
inherently have it's location determined (P#40). 

Sandhu teaches "A method and system whereby two mobile units 
can locate each other is presented. A user connects an interface 
device, such as a personal digital assistance (PDA) , a wireless 
phone, a laptop, or a pager, to a mobile unit. The mobile unit 
regularly obtains its location through a location-determining 
technology (e.g., GPS) and sends the location to a service 
provider computer . The service provider computer maintains a 
database of the current location of all the mobile units, and 
provides the location of mobile units to each of the mobile 
units." (Abstract) . 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that location information is used, to provide means for utilizing the 
user's location to assist with the authentication process to quickly identify which area 
the user has roamed to and what services may be available there. 
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As per claim 5, Tsuda teaches claim 4 but is silent on wherein receiving in the 
message from the subscriber user equipment further a global cell identifier which 
indicates the subscriber's location information. 

Kim teaches "FIG. 5 illustrates a base station system parameter database mounted on the 
home-zone service center 170. As shown in the drawing, the base station system parameter 
database stores every base station's inherent ID (Bts id), location information of each base 
station like latitude and longitude, information about each sector like angle, system delay, and 
service range (angle, s_delay, svc_ran), exception range (exp_ran), change filed (change) and so 
forth." (P#40). The examiner interprets the BTS-ID as being the Global Cell-ID. 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that the message contains a global cell identifier which indicates the 
subscriber's location information, to provide means for utilizing the user's location to 
assist with the authentication process to quickly identify which area the user has 
roamed to and what services may be available there. 

As per claim 9, Tsuda teaches claim 6 but is silent on further comprising 
transmitting in said part of the information as location network specific information. 

Tsuda teaches an elaborate process whereby a user can authenticate with 
foreign/home AAA servers for services as they roam (see figures 10-11). 

Kim teaches . .FIG. 5 illustrates a base station system parameter database mounted on 
the home-zone service center 170. As shown in the drawing, the base station system parameter 
database stores every base station's inherent ID (Bts id), location information of each base 
station like latitude and longitude,..". (P#40) which shows that the location of each BTS is 
known (eg based on LAT/LONG) and would provide Tsuda with the location of the 
foreign agent/access router's location and hence, the location of the mobile unit it is 
communicating with. 

Sandhu teaches "A method and system whereby two mobile units can locate each other 
is presented. The mobile unit regularly obtains its location through a location-determining 
technology (e.g., GPS) and sends the location to a service provider computer . The service 
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provider computer maintains a database of the current location of all the mobile units, and 
provides the location of mobile units to each of the mobile units." (Abstract). 
It would have been obvious to one skilled in the art at the time of the invention to modify 
Tsuda, such that said part of the information is location network specific information, to 
provide means for the system to understand where the mobile unit is located and 
provide services as requested by the user for that location and charge accordingly. 

As per claim 23, Tsuda teaches claim 21 further comprising a gateway network 
for certificate requests in a home network of the user equipment, the gateway network 
being configured to perform the network node address determination (figures 1 and 10 
show the operation for a roaming mobile IP user to access home/foreign networks and 
access network nodes/gateways (eg. access points/routers, or agents) whereby mobile 
IP will provide the address of said network node/gateway. Tsuda teaches using 
certificates from a certificate authority - paragraph P#186). 

As per claim 25, Tsuda teaches claim 1, further comprising: checking whether or 
not the location information in the message corresponds to the location information 
maintained in the system; and using the maintained location information if it does not 
correspond to the location information in the message (figure 1 shows a user in either a 
Home Network #1001 whereby the user communicates with the home agent #101 1 
and/or the user roaming to a Visited/Foreign network #1002 and communicates with the 
Foreign agent #1021. Either means would inherently include the network understanding 
where the user is located based on the IP Address of the IP Subnet for the Access 
Point) but is silent on configuring the message with location information. 

Kim teaches determining location of the mobile user based on the BTS's 
LAT/LONG being known and hence a mobile communicating with a specific BTS will 
inherently have it's location determined (P#40). 

Sandhu teaches "A method and system whereby two mobile units 
can locate each other is presented. A user connects an interface 
device, such as a personal digital assistance (PDA), a wireless 



Application/Control Number: 10/705,396 
Art Unit: 2617 



Page 1 1 



phone, a laptop, or a pager, to a mobile unit. The mobile unit 
regularly obtains its location through a location-determining 
technology (e.g., GPS) and sends the location to a service 
provider computer . The service provider computer maintains a 
database of the current location of all the mobile units, and 
provides the location of mobile units to each of the mobile 
units. " (Abstract) . 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that location information is used, to provide means for utilizing the 
user's location to assist with the authentication process to quickly identify (or send error 
message as to) which area the user has roamed to and what services may be available 
there. 

Claims 24 and 26 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Tsuda/Kim/Sandhu and further in view of Okazaki et al. US 2003/0092425. 

As per claim 24, Tsuda teaches claim 1 , further comprising: checking whether or 
not the location information in the message corresponds to the location information 
maintained in the system (figure 1 shows a user in either a Home Network #1001 
whereby the user communicates with the home agent #101 1 and/or the user roaming to 
a Visited/Foreign network #1002 and communicates with the Foreign agent #1021. 
Either means would inherently include the network understanding where the user is 
located based on the IP Address of the IP Subnet for the Access Point) but is silent on 
configuring the message to comprise subscriber location, the message including 
subscriber's location information; and if it does not correspond to the location 
information in the message, sending an error indication by using the maintained location 
information. 

Kim teaches determining location of the mobile user based on the BTS's 
LAT/LONG being known and hence a mobile communicating with a specific BTS will 
inherently have it's location determined (P#40). 
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Sandhu teaches "A method and system whereby two mobile units 
can locate each other is presented. The mobile unit regularly 
obtains its location through a location-determining technology 
(e.g., GPS) and sends the location to a service provider 
computer. The service provider computer maintains a database of 
the current location of all the mobile units, and provides the 
location of mobile units to each of the mobile units." (Abstract). 

Okazaki teaches securing access in a mobile IP network (title) that uses AAA 
authentication whereby error messages are used [ P#53] "...MN then sends a 
registration request (MIP_Reg_Request) to FA2 (Step 71). This request includes MN's home 
address, the address of MN's home agent (HA) and MN's identification, such as its Network 
Access Identifier (NAI). FA2 formats the request into Diameter messages and sends the 
formatted registration request to the local administrative server AAA FA 1 (Step 72). Upon 
receiving the request from FA2, AAA FA 1 determines the home administrative server of MN 
and forwards the request to AAA HA (Step 73). AAA HA performs the identity verification of 
MN. If AAA HA fails to verify the identity of MN, it returns an error message to AAA FA1 . If, 
however, AAA HA successfully verifies the identity of MN, AAA HA then sends the request to 
HA (Step 74)..". Okazaki's use of error-handling reads on the claim. 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that the message including subscriber's location information; and if 
it does not correspond to the location information in the message, sending an error 
indication by using the maintained location information, to provide means for utilizing the 
user's location to assist with the authentication process to quickly identify (or send error 
message as to) which area the user has roamed to and what services may be available 
there. 



As per claim 26, Tsuda teaches claim 1 , further comprising a message (figure 1 
shows a user in either a Home Network #1001 whereby the user communicates with the 
home agent #101 1 and/or the user roaming to a Visited/Foreign network #1002 and 
communicates with the Foreign agent #1021. Either means would inherently include 
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the network understanding where the user is located based on the IP Address of the IP 
Subnet for the Access Point) but is silent on a message with subscriber location; 
checking whether or not the location information in the message corresponds to the 
location information maintained in the system; and if it does not correspond to the 
maintained location information, sending an error indication by using the location 
information in the message and location information. 

Kim teaches determining location of the mobile user based on the BTS's 
LAT/LONG being known and hence a mobile communicating with a specific BTS will 
inherently have it's location determined (P#40). 

Sandhu teaches "A method and system whereby two mobile units can locate each other 
is presented. A user connects an interface device, such as a personal digital assistance (PDA), a 
wireless phone, a laptop, or a pager, to a mobile unit. The mobile unit regularly obtains its 
location through a location-determining technology (e.g., GPS) and sends the location to a 
service provider computer . The service provider computer maintains a database of the current 
location of all the mobile units, and provides the location of mobile units to each of the mobile 
units." (Abstract) . 

Okazaki teaches securing access in a mobile IP network (title) that uses AAA 
authentication whereby error messages are used [ P#53 ] "...MN then sends a registration 
request (MIP_Reg_Request) to FA2 (Step 71). This request includes MN's home address, the 
address of MN's home agent (HA) and MN's identification, such as its Network Access Identifier 
(NAI). FA2 formats the request into Diameter messages and sends the formatted registration 
request to the local administrative server AAA FA 1 (Step 72). Upon receiving the request from 
FA2, AAA FA 1 determines the home administrative server of MN and forwards the request to 
AAA HA (Step 73). AAA H A performs the identity verification of MN. If AAA HA fails to 
verify the identity of MN, it returns an error message to AAA FA1 . If, however, AAA HA 
successfully verifies the identity of MN, AAA HA then sends the request to HA (Step 74)..". 
Okazaki's use of error-handling reads on the claim. 

It would have been obvious to one skilled in the art at the time of the invention to 
modify Tsuda, such that it checks whether or not the location information in the 
message corresponds to the location information maintained in the system; and if it 
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does not correspond to the maintained location information, sending an error indication 
by using the location information in the message, to provide means for utilizing the 
user's location to assist with the authentication process to quickly identify (or send error 
message as to) which area the user has roamed to and what services may be available 



Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Stephen M. D'Agosta whose telephone number is 571- 
272-7862. The examiner can normally be reached on M-F, 8am to 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bill Trost can be reached on 571-272-7872. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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